Incident management analysis

Abstract

Devices, methods, and systems for incident management analysis are described herein. One device includes a memory and a processor configured to execute executable instructions stored in the memory to receive information associated with management of a number of incidents at a site, wherein each respective incident is managed by an operator using a standard operating procedure associated with that incident, analyze the number of incidents using the received information, and provide the analysis of the number of incidents to a user.

What is claimed: 
     
         1 . A computing device for incident management analysis, comprising:
 a memory; and   a processor configured to execute executable instructions stored in the memory to:
 receive information associated with management of a number of incidents at a site, wherein each respective incident is managed by an operator using a standard operating procedure associated with that incident; 
 analyze the number of incidents using the received information; and 
 provide the analysis of the number of incidents to a user. 
   
     
     
         2 . The computing device of  claim 1 , wherein:
 the received information includes information associated with the operator's management of each respective incident; and   the analysis of the number of incidents includes an analysis of the operator's performance in managing the number of incidents.   
     
     
         3 . The computing device of  claim 1 , wherein:
 the received information includes information associated with steps of the standard operating procedure associated with each respective incident; and   the processor is configured to execute the instructions to:
 analyze the steps of the standard operating procedure associated with each respective incident using the information associated with the steps of the standard operating procedure associated with each respective incident; and 
 provide, to the user, the analysis of the steps of the standard operating procedure associated with each respective incident. 
   
     
     
         4 . The computing device of  claim 1 , wherein:
 the computing device includes a user interface; and   the processor is configured to execute the instructions to provide the analysis of the number of incidents to the user by displaying the analysis of the number of incidents on the user interface.   
     
     
         5 . The computing device of  claim 1 , wherein the analysis of the number of incidents includes:
 a total amount of incidents that occurred during a particular time period;   an amount of the incidents that occurred during the particular time period that were resolved during the particular time period; and   an amount of the incidents that occurred during the particular time period that were not resolved during the particular time period.   
     
     
         6 . The computing device of  claim 1 , wherein the analysis of the number of incidents includes:
 a classification of the number of incidents into a number of different types; and   an indication of which type of incident has occurred most frequently.   
     
     
         7 . The computing device of  claim 1 , wherein the analysis of the number of incidents includes:
 a classification of the number of incidents into a number of different priority levels; and   an amount of incidents classified into each respective priority level.   
     
     
         8 . The computing device of  claim 1 , wherein the processor is configured to execute the instructions to assign a level of security to the site based on the analysis of the number of incidents. 
     
     
         9 . A method for incident management analysis, comprising:
 receiving, by a computing device of an incident management system, information associated with steps of a standard operating procedure for management of an incident at a site;   analyzing, by the computing device, the steps of the standard operating procedure using the received information; and   providing, by the computing device, the analysis of the steps of the standard operating procedure to a user.   
     
     
         10 . The method of  claim 9 , wherein the method includes determining, based on the analysis of the steps of the standard operating procedure, a number of corrective actions to improve the steps of the standard operating procedure. 
     
     
         11 . The method of  claim 10 , wherein the method includes automatically implementing, by the computing device, the number of corrective actions in the steps of the standard operating procedure. 
     
     
         12 . The method of  claim 10 , wherein the number of corrective actions include removing a number of steps from the steps of the standard operating procedure. 
     
     
         13 . The method of  claim 9 , wherein providing the analysis of the steps of the standard operating procedure to the user includes:
 generating a report including the analysis of the steps of the standard operating procedure; and   sending the report to the user.   
     
     
         14 . The method of  claim 9 , wherein the analysis of the steps of the standard operating procedure includes an indication of the steps of the standard operating procedure being performed least frequently or not at all during management of the incident at the site. 
     
     
         15 . A non-transitory computer readable medium having computer readable instructions stored thereon that are executable by a processor to:
 receive information associated with an operator's management of a number of incidents at a site, wherein each respective incident is managed by the operator using a standard operating procedure associated with that incident;   analyze, using the received information, the operator's performance in managing the number of incidents; and   provide the analysis of the operator's performance to a user.   
     
     
         16 . The computer readable medium of  claim 15 , wherein the instructions are executable to determine, based on the analysis of the operator's performance, a number of corrective actions to improve the operator's management of the number of incidents. 
     
     
         17 . The computer readable medium of  claim 16 , wherein the instructions are executable to provide the number of corrective actions to the user. 
     
     
         18 . The computer readable medium of  claim 16 , wherein the number of corrective actions include reassigning management of one or more of the number of incidents to a different operator. 
     
     
         19 . The computer readable medium of  claim 16 , wherein the analysis of the operator's performance includes a total amount of time needed by the operator to resolve the number of incidents. 
     
     
         20 . The computer readable medium of  claim 15 , wherein the analysis of the operator's performance includes:
 an amount of incidents currently being managed by the operator; and   an amount of incidents that have been resolved by the operator.